Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          2CT1TO4QjqGBz/WOvyMPoesL2w/fqtFMGSzr1NvhqiM=
Subject key identifier:   20:CF:9C:99:A1:DA:8F:AA:F8:9C:C6:97:7E:C7:46:59:85:09:4D:76
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       53DF888F43F7B1A46C19E49D7B48718EDD4CC8E0
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa
Signing time:             Wed 08 Jul 2026 13:08:51 +0000
ROA not before:           Wed 08 Jul 2026 13:03:51 +0000
ROA not after:            Wed 07 Jul 2027 13:08:51 +0000
asID:                     264891
IP address blocks:        168.227.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:df:88:8f:43:f7:b1:a4:6c:19:e4:9d:7b:48:71:8e:dd:4c:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Jul  8 13:03:51 2026 GMT
            Not After : Jul  7 13:08:51 2027 GMT
        Subject: CN=20CF9C99A1DA8FAAF89CC6977EC7465985094D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:4b:27:68:42:85:76:4c:8f:1a:f0:6d:ed:
                    fe:74:68:90:f4:22:4b:f2:92:e1:2c:74:15:bb:a6:
                    99:2a:a6:b8:49:63:be:56:71:8c:ec:5f:20:4c:a8:
                    e1:23:ad:a1:1f:47:93:ea:c3:4f:cb:f3:55:de:6a:
                    97:5b:1a:70:9a:0f:42:d5:93:f8:56:a3:d1:cd:d0:
                    66:c8:46:5a:8a:c2:26:99:79:d9:fe:53:ca:c5:c2:
                    b3:74:90:bd:c5:39:be:d1:ec:8f:93:87:82:e6:7e:
                    1e:95:fe:63:aa:3e:bd:d6:8d:ce:80:34:1a:67:55:
                    78:32:7b:cf:6c:6e:d1:99:8c:27:af:c5:cc:95:59:
                    01:5f:c0:40:a0:78:8c:3e:d0:e6:b6:e0:77:6f:55:
                    d4:2f:12:07:62:da:4c:51:38:d0:b2:44:5c:5e:0a:
                    54:10:c0:91:f7:f2:4c:90:94:ae:c4:78:fc:89:6a:
                    14:df:03:5b:69:92:01:42:0d:56:85:43:8f:7c:bd:
                    81:c4:40:84:cd:44:c3:a0:9f:ff:a4:a2:ac:38:ca:
                    56:3a:eb:d6:7a:fc:71:21:2f:13:62:c2:12:6d:76:
                    d0:1d:4b:18:a1:58:d6:66:e0:dc:45:5d:2e:fa:8a:
                    0a:d0:e8:76:a8:26:2a:f0:23:3c:da:3b:d3:7a:3a:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:9C:99:A1:DA:8F:AA:F8:9C:C6:97:7E:C7:46:59:85:09:4D:76
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:c4:d8:39:28:57:74:78:df:eb:ee:eb:b2:7e:4b:b9:a6:
         82:11:34:e9:53:52:d0:a2:f1:f8:8d:ba:46:34:bc:b5:24:62:
         b4:b0:86:b3:82:d3:b4:24:12:f5:3b:b3:d6:19:b6:06:f7:34:
         1e:f4:d8:57:1f:ba:81:7d:77:67:ee:2e:1a:db:74:63:23:03:
         72:2b:4e:0f:cd:49:0f:1e:1e:58:b9:3c:d6:3e:39:ae:0c:ca:
         eb:dc:99:68:c7:09:ad:45:61:bf:c2:71:f6:53:9e:c2:c1:60:
         3c:a4:f5:0e:b3:35:19:19:0f:85:ab:d3:c4:aa:15:bc:92:1d:
         dd:61:99:cd:d5:b2:94:12:0f:4d:8f:9a:75:e2:e4:6e:10:ef:
         69:20:61:14:5b:b7:c0:c4:a9:8b:ca:83:84:dc:49:bb:3e:34:
         89:d1:e7:b8:25:b7:59:73:c1:c1:d8:36:02:b3:7b:e2:a4:a9:
         d2:af:98:e1:a5:89:e9:67:7b:a3:bd:fb:1f:77:04:38:09:04:
         0d:c1:60:d2:f6:5a:91:22:92:1a:63:02:ec:cb:15:18:91:64:
         b2:a4:04:2b:3d:39:8e:59:f1:ea:61:e7:37:40:e5:ec:0c:70:
         27:b7:47:d8:fd:cf:bf:8c:cd:6a:15:3f:25:a3:5f:6c:1f:17:
         93:c3:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:05:03 2026 by rpki-client